JANUS DEFINEIPGROUP: Difference between revisions
Jump to navigation
Jump to search
(→Syntax) |
m (add IPV6 address format) |
||
| (One intermediate revision by the same user not shown) | |||
| Line 2: | Line 2: | ||
<span class="pageSubtitle">Create named group of ip addresses</span> | <span class="pageSubtitle">Create named group of ip addresses</span> | ||
This command creates a named group which contains any number of IP addresses. The <var class="term">groupname</var> can then be used to control | This command creates a named group which contains any number of IP addresses. The <var class="term">groupname</var> can then be used to control <var class="product">[[Janus Web Server]]</var> or <var class="product">[[Janus Sockets]]</var> access based on IP address. | ||
==Syntax== | ==Syntax== | ||
<p class="syntax"> JANUS DEFINEIPGROUP groupname ipaddress(es) | <p class="syntax"> JANUS DEFINEIPGROUP <span class="term">groupname ipaddress(es) </span> | ||
</p> | </p> | ||
Where each parameter is positional and required: | Where each parameter is positional and required: | ||
<table | <table> | ||
<tr><th>groupname</th> | <tr><th>groupname</th> | ||
<td>A 1 - 30 character name of the group with which IP addresses are being associated for <var>ALLOW</var> and <var>DISALLOW</var> rules in <var>JANUS WEB</var>, <var>JANUS CLSOCK</var>, or <var>JANUS SRVSOCK</var> commands.</td></tr> | <td>A 1 - 30 character name of the group with which IP addresses are being associated for <var>ALLOW</var> and <var>DISALLOW</var> rules in <var>JANUS WEB</var>, <var>JANUS CLSOCK</var>, or <var>JANUS SRVSOCK</var> commands.</td></tr> | ||
<tr><th>ipaddress(es)</th> | <tr><th>ipaddress(es)</th> | ||
<td>A list of IP addresses or subnet masks in | <td>A list of IP addresses or subnet masks, in any combination, separated by spaces or commas. Each value can be an IPV4 dotted-decimal address, an IPV6 address (as of version 7.7 of Model 204), or it can be a subnet. | ||
<ul> | |||
<li>IPV4 subnets are indicated by an IP address followed by one of these: | |||
<ul> | <ul> | ||
<li> | <li>A forward slash (<tt>/</tt>) followed by a netmask (with no intervening blanks)</li> | ||
<li>A hyphen (<tt>-</tt>) followed by the number of bits in the subnet mask (with no intervening blanks)</li> | |||
</ul> | |||
<p> | |||
For example, <code>198.242.244.97</code> is a simple IP address that must be matched exactly. <code>.198.242.244.0/255.255.255.0</code>, which is equivalent to <code>198.242.244.0-24</code>, indicates that any machine on subnet 198.242.244.0 is to be allowed access to <var class="term">url</var>. </p> | |||
Note: Translation of a name to an IP address is not supported on this command. | <li>IPV6 addresses are 128-bit integers, represented with eight, colon-separated, 16-bit (four hex-digit) groups, which may be abbreviated and represented with fewer groups. For example, | ||
<code>fe80:0000:0000:0000:0200:0000:0300:0016</code> or <code>fe80::200:0:300:16</code>. | |||
<p> | |||
An IPV6 subnet is indicated by the first address in the range, followed by a forward slash, and a decimal value equal to the number of bits in the network prefix. A subnet that includes the example address above is: <code>fe80::200:0/48</code>. </p></li> | |||
</ul> | |||
<p class="note"><b>Note:</b> Translation of a name to an IP address is not supported on this command. </p> | |||
</td></tr> | </td></tr> | ||
</table> | </table> | ||
| Line 29: | Line 37: | ||
The <var>DEFINEIPGROUP</var> command may be abbreviated <var>DEFIPGROUP</var>, <var>DEFIPG</var>, and <var>DEFINEIPG</var>. | The <var>DEFINEIPGROUP</var> command may be abbreviated <var>DEFIPGROUP</var>, <var>DEFIPG</var>, and <var>DEFINEIPG</var>. | ||
==Example== | |||
The following example builds an IP group called <code>PRIVILEGED</code> made of all IP addresses in the 198.242.0.0 subdomain (using 16 mask bits), all addresses in the 169.231.11.0 subdomain (using 24 mask bits) and the single IP address 184.194.222.7. | The following example builds an IP group called <code>PRIVILEGED</code> made of all IP addresses in the 198.242.0.0 subdomain (using 16 mask bits), all addresses in the 169.231.11.0 subdomain (using 24 mask bits) and the single IP address 184.194.222.7. | ||
Latest revision as of 21:47, 6 December 2016
Create named group of ip addresses
This command creates a named group which contains any number of IP addresses. The groupname can then be used to control Janus Web Server or Janus Sockets access based on IP address.
Syntax
JANUS DEFINEIPGROUP groupname ipaddress(es)
Where each parameter is positional and required:
| groupname | A 1 - 30 character name of the group with which IP addresses are being associated for ALLOW and DISALLOW rules in JANUS WEB, JANUS CLSOCK, or JANUS SRVSOCK commands. |
|---|---|
| ipaddress(es) | A list of IP addresses or subnet masks, in any combination, separated by spaces or commas. Each value can be an IPV4 dotted-decimal address, an IPV6 address (as of version 7.7 of Model 204), or it can be a subnet.
Note: Translation of a name to an IP address is not supported on this command. |
The DEFINEIPGROUP command may be abbreviated DEFIPGROUP, DEFIPG, and DEFINEIPG.
Example
The following example builds an IP group called PRIVILEGED made of all IP addresses in the 198.242.0.0 subdomain (using 16 mask bits), all addresses in the 169.231.11.0 subdomain (using 24 mask bits) and the single IP address 184.194.222.7.
JANUS DEFIPG PRIVILEGED 198.242.0.0-16 169.231.11.0-24 184.194.222.7